新的车辆远程诊断授权协议

doi:10.11959/j.issn.1000-436x.2014.11.017

Abstract

Abstract:

The authorization of diagnosis principals is a critical problem in the remote fault diagnosis of vehicles.Considering the defects of the previous authorization protocol for the remote diagnosis，i.e.PVAUDS，a novel authorization protocol is proposed，named PVAUDS+.In addition to the enforcement on the security properties of PVAUDS，the bidirectional authentication and the freshness of authorization tickets for the diagnosis principals are provided.The resistance of Denial-of-Service (DoS) attack for the trusted third party is also provided.The proposed security targets are achieved through the cost increasing of requests for the resistance of DoS attack，the automatic proof of security properties with the ProVerif tool.The results of quantitative analysis show proposed protocol is practical for use.

Key words: security protocol, remote vehicle diagnosis, authorization, automatic proof of protocol

Zheng-da JIAO,Jian-feng MA,Cong SUN,Qing-song YAO. New remote authorization protocol for vehicle diagnosis[J]. Journal on Communications, 2014, 35(11): 146-153.

Figures/Tables 6

References 15

[1]	PIERRE K ， TOMAS O . Protecting vehicles against unauthorized diagnostics sessions using trusted third parties[A]. SAFECOMP 2013[C]. 2013. 70-81.
[2]	JHENG S J ， CHEN S H . The implementation of OBD-II vehicle diagnosis system integrated with cloud computation technology[A]. RVSP 2013[C]. 2013. 9-12.
[3]	CHEN S H ， WANG J F ， WEI Y R . The implementation of real-time on-line vehicle diagnostics and early fault estimation system[A]. The Fifth International Conference on Genetic and Evolutionary Computing[C]. 2011. 13-16.
[4]	ASHRAF T ， AHMAD S ， FOUAD J ，et al. Android-based universal vehicle diagnostic and tracking system[A]. Consumer Electronics(ISCE)[C]. 2012. 137-143.
[5]	何金儿，朱守正，张长伟 . 一种新的车辆远程诊断系统的设计和实现[J]. 计算机应用与软件， 2012，29(9): 95-97. HE J E ， ZHU S Z ， ZHANG C W . Design and implementation of a new car remote diagnostic system[J]. Computer Applications and Software， 2012，9(9): 95-97.
[6]	MUHAMMAD S I ， HENDRIK S ， YVES R ，et al. Secure automotive on-board protocols:a case of over-the-air firmware updates[J]. Nets4Trains/Nets4Cars， 2011，6596: 224-238.
[7]	DENNIS K.NILSSON ， ULF E . LARSON:secure firmware updates over the air in intelligent vehicles[A]. IEEE International Conference on Communications Workshops (ICC Workshops)[C]. 2008. 380-384.
[8]	DANNY D ， ANDREW C，YAO . On the security of public key protocols[A]. IEEE Transactions on Information Theory[C]. 1983. 198-208.
[9]	BRUNO B . An efficient cryptographic protocol verifier based on prolog rules[A]. Computer Security Foundations Workshop[C]. 2001. 82-96.
[10]	BLANCHET B ， SMYTH B ， CHEVAL V.ProVerif 1 . 87:Automatic Cryptographic Protocol Verifier，User Manual and Tutorial[M]. 2013.
[11]	冯登国 . 安全协议:理论与实践[M]. 北京: 清华大学出版社， 2011. FENG D G . The Theory and Practice of Security Protocol[M]. Beijing: Tsinghua University PressPress， 2011.
[12]	ANDREAS G ， SIMON O . Analysis of the client puzzles protocol[A]. KTH Computer Science and Communication[C]. 2012.
[13]	ALEKSANDAR J ， ALFRED J，MENEZES . Elliptic curves and cryptography[A]. Puhlic-key cryptography[C]. 2005. 91-112.
[14]	SCOTT M . Efficient implementation of cryptographic pairings[EB/OL]. ， 2007.
[15]	CALANDRIELLO G ， PAPADIMITRATOS P ， HUBAUX J P ，et al. Efficient and robust pseudonymous authentication in VANET[A]. Proceedings of the 4th ACM International Workshop on Vehicular Ad Hoc Networks (VANET’07)[C]. 2007. 19-28.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	含义
Cert_X	通信主体X的数字证书
Sign_X	使用X的私钥进行的签名操作
Enc_X	使用X的公钥进行的加密操作
nonce_X	通信主体X生成的随机挑战
Ticket_XK_X，Y	经过TTP签名的发送给X的票据诊断主体X、Y之间的共享密钥
?t	票据的生成时间
V_ID	车辆的身份标识
V_policy	车辆诊断的安全策略

安全目标	PVAUDS	PVAUDS+	新协议增加机制
T1	×	√	挑战-响应/对称加密
T2	×	√	挑战-响应
T3	×	√	client-puzzle
T4	√	√	—

安全属性	工具内部描述	验证结果
Q1	Query event(termProto(h_2114，V[]，k_2115，m_2116，h_2114，V[]，k ' m_2116)?k_2115=k '	true
Q2	Query inj-event (VacceptsKey (k_11418，v_11419，d_11420，p_11421，N_11422))? inj-event(creatKey (k_11418，v_11419，d_11420，p_11421，N_11422))	true
Q3	Query inj-event (DEacceptsKey (k_9569，v_9570，d_9571，Nde_9574，ht_9575))?inj-event(createKey (k_9569，v_9570，d_9571，p_9572，N_9573))	rue
Q4	Query not attacker_bitstring(s[])	true

k所选长度/bit	TTP验证时间/ms	V解答时间/ms
8	0.29	0.874
16	0.237	29.841
24	0.243	5 380.862

协议名称	通信主体	加密/解密	签名/验证	证书/验证	Puzzle	计算开销
	TTP	2/1	2/0	1	0	493 MMs
PVAUDS	V	1/1	0/1	2	0	638 MMs
	DE	0/1	0/1	0	0	174 MMs
	TTP	3/2	2/0	1	0	406 MMs
PVAUDS+	V	2/2	0/1	2	1	725 MMs+T_puzzle
	DE	0/1	0/1	0	0	174 MMs

New remote authorization protocol for vehicle diagnosis

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 6

References 15

Related Articles 15

Metrics

Recommended 0

[1]	Xiang GONG, Tao FENG, Jinze DU. Formal modeling and security analysis method of security protocol based on CPN [J]. Journal on Communications, 2021, 42(9): 240-253.
[2]	Rongna XIE,Yunchuan GUO,Fenghua LI,Guozhen SHI,Yaqiong WANG,Kui GENG. Extended access control mechanism for cross-domain data exchange [J]. Journal on Communications, 2019, 40(7): 67-76.
[3]	Bo MENG,Xudong HE,Jinli ZHANG,Lili YAO,Jintian LU. Security analysis of security protocol Swift implementations based on computational model [J]. Journal on Communications, 2018, 39(9): 178-190.
[4]	Qi-ying WU,Jian-feng MA,Hui LI,Jun-wei ZHANG,Qi JIANG,Yin-bin MIAO. Multi-keyword search over encrypted data with user revocation [J]. Journal on Communications, 2017, 38(8): 183-193.
[5]	Wen GU,Ji-hong HAN,Lin YUAN. SSMCI:verification mechanism for security protocols centered on the attacker [J]. Journal on Communications, 2017, 38(10): 175-188.
[6]	Bin ZHAO,Jing-sha HE. Bayes decision theory based risk minimization authorization mapping [J]. Journal on Communications, 2015, 36(Z1): 157-161.
[7]	Jing YANG,Dan FAN,Yu-qing ZHANG. Adjusted automata learning algorithm for security protocol adaptive model checking [J]. Journal on Communications, 2015, 36(Z1): 266-276.
[8]	. Towards session identification using principal behavior for multi-party secure protocol [J]. Journal on Communications, 2015, 36(11): 190-200.
[9]	Chun-xiang GU,Huan-xiao WANG,Yong-hui ZHENG,Dan XIN,Nan LIU. SAT-based lazy formal analysis method for security protocols [J]. Journal on Communications, 2014, 35(11): 117-125.
[10]	. SAT-based lazy formal analysis method for security protocols [J]. Journal on Communications, 2014, 35(11): 13-116.
[11]	. New remote authorization protocol for vehicle diagnosis [J]. Journal on Communications, 2014, 35(11): 17-154.
[12]	. SIM: a secure IP protocol for MANET [J]. Journal on Communications, 2013, 34(Z1): 15-125.
[13]	. Analysis and improvement for authentication protocols ofmobile ad hoc network with CSP approach [J]. Journal on Communications, 2013, 34(Z1): 8-66.
[14]	Rong-sen LI,Wen-hua DOU. SIM: a secure IP protocol for MANET [J]. Journal on Communications, 2013, 34(Z1): 116-125.
[15]	Li-cai LIU,Li-hua YIN,Yun-chuan GUO,Yan SUN. Analysis and improvement for authentication protocols of mobile ad hoc network with CSP approach [J]. Journal on Communications, 2013, 34(Z1): 58-66.